This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3232332e32372e3131352e302f32342d3234203d3e20323639383232.roa
File:                     3232332e32372e3131352e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          DMn2piDiySw/R3kXlmuYseFBiCvdfvlE9XerrlqTiXQ=
Subject key identifier:   BF:B9:94:42:59:22:B6:E8:01:DF:4C:66:7E:FC:84:E8:CE:83:42:31
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       24BDABCBF6E2D558C4F698419DAB4CA8E8DBA317
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3232332e32372e3131352e302f32342d3234203d3e20323639383232.roa
Signing time:             Tue 06 Jan 2026 19:15:18 +0000
ROA not before:           Tue 06 Jan 2026 19:10:18 +0000
ROA not after:            Tue 05 Jan 2027 19:15:18 +0000
asID:                     269822
IP address blocks:        223.27.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 02:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bd:ab:cb:f6:e2:d5:58:c4:f6:98:41:9d:ab:4c:a8:e8:db:a3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Jan  6 19:10:18 2026 GMT
            Not After : Jan  5 19:15:18 2027 GMT
        Subject: CN=BFB994425922B6E801DF4C667EFC84E8CE834231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:a2:c5:39:12:9f:87:6f:8e:3f:98:5a:56:
                    53:0d:a1:00:53:55:ac:11:6f:4e:e5:5c:76:2e:36:
                    9f:bf:bc:74:56:5b:84:93:c0:74:b9:81:7b:0d:ac:
                    92:0b:3f:aa:99:0d:16:49:8f:f4:23:f6:54:db:2c:
                    58:11:f3:98:bf:c0:dd:98:02:a1:4c:62:81:3d:af:
                    35:4b:01:f1:d9:36:66:ec:d4:25:0d:26:cf:b7:d3:
                    9e:61:6a:75:21:e5:e6:77:48:b4:e2:e5:f2:3a:7d:
                    c8:47:30:95:70:7b:65:16:ff:1c:1e:c7:89:fa:08:
                    9b:80:93:49:ec:b6:45:45:62:e0:09:36:f2:e7:92:
                    15:c1:61:29:1a:db:6d:4c:e6:16:5d:15:6b:7e:e4:
                    4c:08:57:00:07:11:fa:dc:0c:94:95:92:e3:69:73:
                    63:65:43:f8:d0:0b:1f:16:d2:79:e2:f7:59:13:00:
                    fd:07:5f:e4:5b:cb:90:ee:d5:f4:3c:40:87:a4:ec:
                    28:b3:6c:3b:c1:ab:f1:54:1c:11:7e:61:88:50:6e:
                    16:17:05:06:2d:76:74:e4:45:38:7d:e6:e3:b6:59:
                    6c:c9:59:98:6c:e8:5b:5d:ad:6f:81:77:49:5c:56:
                    92:8b:1a:65:33:9b:16:e3:57:a0:56:3b:c2:ad:32:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B9:94:42:59:22:B6:E8:01:DF:4C:66:7E:FC:84:E8:CE:83:42:31
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3232332e32372e3131352e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:a4:a7:e4:f1:1a:5a:57:bd:0f:e9:b6:51:83:8e:27:64:
         6e:88:39:72:5a:00:f5:51:b4:88:d1:85:87:4a:34:71:45:d0:
         bc:1a:5d:65:ab:bc:48:cb:6f:b4:39:8e:50:3b:51:be:1d:eb:
         1c:20:a2:7f:5f:31:70:9a:0e:1c:92:bb:35:a7:7a:fc:04:da:
         82:bb:f7:1a:8f:4c:f4:70:b0:7a:f3:6e:4b:17:20:6f:31:51:
         2d:96:bc:54:3f:d1:09:b7:b9:bf:f6:00:e1:b0:cc:ed:b9:dc:
         ea:16:c0:79:5b:63:a9:68:a3:e6:b2:32:65:8a:36:d4:8c:b9:
         4a:3e:c0:b4:95:3f:db:30:6b:04:fe:bd:35:50:56:fb:a6:bc:
         c0:f1:21:61:dd:c2:71:0a:60:bf:f4:c6:37:53:2c:88:ba:0e:
         cd:1a:32:12:e9:00:18:3e:3e:ec:19:4a:b9:7a:26:87:45:26:
         7b:02:f2:96:38:87:34:0e:cb:26:85:e9:a4:b9:b9:5e:a8:9a:
         a8:d9:53:e4:24:4e:2c:99:20:46:e3:5e:c1:1f:32:62:cd:7c:
         1a:ba:75:c6:2f:44:32:d1:47:00:c4:9d:ea:93:10:b9:ab:89:
         5a:9d:ea:58:9a:ea:43:cd:f5:db:64:08:d1:95:f2:42:54:82:
         7d:d5:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:29 2026 by rpki-client